IN THE CLAIMS : 

Please amend the claims as follows. 

1 . (Currently Amended) A method for secure communication between a first 
end terminal located in a first secure network and a second end terminal located in a 
second secure network, said first and second networks being separated by a relatively 
insecure intermediate network, the method including the steps of: 

selectively routing a predetermined type of communication identified by a 
trigger from the first end terminal to the second end terminal over said relatively 
insecure intermediate network by means of at least one or more network elements 
element triggerable to refer to information held in a storage means to selectively route 
said communication according to said information held in said storage means : and 

encrypting said selectively routed communication by means of an encryption 
engine before it traverses said intermediate network, 

wherein said at least one or mor e network e lements element and said 
encryption engine are located substantially within said first secure network. 

2. (Currently Amended) A method as in claim 1, wherein said at least one er 
mere-network e l e m e nt s element comprises switch means provided with control means 
and said storage means. 

3. (Currently Amended) A method as in claim 2, wherein said storage means 
is operable to store said information comprising routing information. 



4. (Currently Amended) A method as in claim 2 or 3, wherein said storage 
means is operable to store said information comprising security information. 

5. (Currently Amended) A method as in claim 2, 3 or 1, wherein said storage 
means is operable to store said information comprising security information including 
at least one or more of the following: encryption information; decryption information; 
security key information; and electronic cash information. 

6. (Currently Amended) A method as in any of claims 3 to 5 claim 3. wherein 
said switch means is operable to selectively route a the predetermined type of 
communication according to routing information in said information held in the 
storage means. 

7. (Currently Amended) A method as in any of claims 4 to 6 claim 4. wherein 
said encryption engine is operable to encrypt said predetermined type of 
communication according to security information in said information held in said 
storage means. 

8. (Currently Amended) A method as in claim 6-e^7-, comprising the step of 
identifying said predetermined type of communication by means of at least one er 
more of the following: originating subscriber characteristics; d e stination subscriber 



charact e ristics; destination subscriber characteristics; pay load characteristics; and 
network service characteristics. 

9. (Currently Amended) A method as in claim 8, wherein said predetermined 
type of communication is identified by means of the-originating and/or destination 
address addresses. 

10. (Currently Amended) A method as in claim 8, wherein said predetermined 
type of communication is identified by means of originating and/or destination 
identification numbers. 

11. (Currently Amended) A method as in any of claims 1 to 10 claim 4, 
wherein said storage means is operable to store said information comprising security 
information, said security information being distributed from a first node to at least 
one or more target nod e s node responsive to a predetermined trigger. 

12. (Currently Amended) A method as in any of claims 3 to 1 1 claim 3 , 
wherein the stored routing information includes subscriber routing preferences. 

13. (Currently Amended) A method as in any of claims 1 to 12 claim 4 , 
wherein the security information includes subscriber security preferences. 



14. (Currently Amended) A method as in any of claims 1 to 13 claim 4. 
wherein the security information includes encryption/decryption information defining 
a preferred algorithm or key for use with predetermined types of communication. 

15. (Currently Amended) A method as in any of claims 2 to 1 4, claim 2. 
wherein said information stored in the storage means is arranged to identify at least 
one or more groups group of users whose communications are to be routed and 
encrypted according to common preferences. 

16. (Currently Amended) A method as in any of claims 2 to 15 claim 2 . 
wh e rein further com prising providing a service management access point is provided 
for accessing and changing said information held in the storage means. 

17. (Currently Amended) A method as in any of claims 11 to 16 claim 11 . 
wherein said security information comprises decryption information, the a distribution 
of said decryption information being triggered according to a predetermined schedule. 

18. (Currently Amended) A method as in any of claims 11 to 17 claim 11 . 
wherein said security information is distributed to a node within at least one or moro 
of the first and second secure networks. 



19. (Currently Amended) A method as in any of claims 11 to 18 claim 11 . 
wherein said security information is distributed to the an end terminal for the 
communication in question. 

20. (Currently Amended) A method as in any of claims 11 to 19 claim 11. 
wherein the at least one or more network e l e ment s element distributes said security 
information from a location substantially within the first secure network. 

21. (Currently Amended) A method as in any of claims 11 to 20 claim 11 . 
wherein at least one or mor e network e l e ments element distributes said security 
information from a location substantially within the second secure network. 

22. (Currently Amended) A method as in claim 21, wherein said security 
information is transferred to the at least one or more network e lements element 
located in the second secure network by means of a secure communication route 
operated by trusted network operators. 

23. (Currently Amended) A method as in claim 21, wherein said security 
information is transferred to the at least one or more network e l e m e nts element 
located in the second secure network by means of a secure communication route over 
a said relatively insecure intermediate network. , 



24. (Currently Amended) A method according to any prec e ding claim I, 
wherein said selectively routing step comprises providing said routing provid e d to a 
subscriber in a visited network by virtue of a roaming agreement between the an 
operator of the visited network and the an operator of the subscriber's home network. 

25. (Currently Amended) A method for the distribution of security 
information between a first node and at least one or more second nodes node , 
including the step of providing at least one or more network e l e m e nts element 
operable to store security information and triggerable to distribute the security 
information from said first node to at least one or more target nodes node . 

26. (Currently Amended) A method for the distribution of security 
information between a first node in a first secure network and at least one or more 
second nodes node in a second secure network, said first and second networks being 
separated by a relatively insecure network, wherein communications from said first 
node to the at least one or more of said second nod e s node via said relatively insecure 
network are encrypted, including the step of providing at least one or more network 
e l e ments element operable to store security information and triggerable to distribute 
said security information in a secure manner from said first node to at least one et 
mete target nod e s node in said second secure network. 



27. (Currently Amended) A secure network arrangement for communication 



between a first end terminal located in a first secure network and a second end 
terminal located in a second secure network, said first and second networks being 
separated by a relatively insecure intermediate network, the secure network 
arrangement including: 

at least one or moro network e l e ments element triggerable to refer to 
informatio n held in a storage means to selectively route a predetermined 
communication identified by a trigger according to said information held in said 
storage means from the first end terminal to the second end terminal over said 
relatively insecure intermediate network; and 

an encryption engine for encrypting said selectively routed communication 
before it traverses said intermediate network, 

wherein said at least one or moro network e lements element and said 
encryption engine are located substantially within said first secure network. 

28. (Currently Amended) A secure network arrangement according to claim 

27, wherein said at least one or moro network e l e ments element comprise comprises a 
switch means provided with a control means and a said storage means for storing said 
information including routing and encryption/decryption information. 

29. (Currently Amended) A secure network arrangement according to claim 

28, wherein the switch means is operable to selectively route a said predetermined 
type-ef-communication according to routing information held in the storage means 



and the encryption engine is operable to encrypt said selectively routed 
communication according to encryption information held in said storage means. 

30. (Currently Amended) A secure network arrangement according to claim 

29, wherein said predetermined types of communication are is identified by means of 
at least one or more of the following: originating subscriber characteristics; 
destination subscriber characteristics; pay load characteristics of and network service 
characteristics. 

3 1 . (Currently Amended) A secure network arrangement according to claim 

30, wherein said predetermined types of communication are is identified by means of 
the-an originating or destination address. 

32. (Currently Amended) A secure network arrangement according to claim 

31, wherein said predetermined typ e s of communication are is identified by means of 
originating identification or destination numbers. 



33. (Original) A secure network arrangement according to claim 31, wherein the 
routing information and encryption/decryption information specifies operations according 
to subscriber preferences. 

34. (Currently Amended) A secure network arrangement according to claim 33, 
wherein the encryption/decryption information defines a preferred algorithm or key for 
use with said predetermined typ e s of communication. 

35. (Currently Amended) A secure network arrangement according to claim 34, 
wherein the information held in the storage means identifies at least one or more groups 
group of users whose communications are to be routed and encrypted according to 
common preferences. 

36. (Currently Amended) A secure network arrangement according to any 
pr e ceding claim 27, comprising a service management access point for accessing and 
changing the information held in the storage means. 

37. (Currently Amended) A secure network arrangement for communication 
between a first end terminal located in a first secure network and a second end terminal 
located in a second secure network, said first and second networks being separated by at 
least on e or more intermediate n e tworks network, wherein at least one communication 



route through which constitutes a relatively insecure communication route from the first 
end terminal to the second end terminal, the secure network arrangement including at 
least one or moro network e l e m e nts element triggerable to selectively route a 
communication from the first end terminal to the second end terminal over said relatively 
insecure intermediate network; and 

an encryption engine for encrypting said selectively routed communication before 
it traverses said relatively insecure interemediate network, wherein said at least one er- 
fflere network elements element and said encryption engine are located substantially 
within said first secure network. 

38. (Currently Amended) A secure network arrangement according to any 
prec e ding claim 37, including decryption means located substantially within the second 
secure network. 

39. (Original) A secure network arrangement according to claim 38, wherein said 
decryption means are provided at the second end terminal. 

40. (Original) A secure network arrangement according to claim 38, wherein said 
decryption means are provided at a node other than the second end terminal. 

41. (Currently Amended) A method for the distribution of security information 
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between a first node in a first secure network and at least one or mor e second nod e s node 
in a second secure network, said first and second networks being separated by a relatively 
insecure network, wherein communications from said first node to the at least one er- 
mor e of said second nod e s node via said relatively insecure network are encrypted, the 
method comprising providing at least one or mor e network e l e m e nts element operable to 
store security information and being triggerable to distribute said security information in 
a secure manner from said first node to at least one or more target nod e s node in said 
second secure network. 

42. (Currently Amended) A network arrangement for the distribution of security 
information between a first node in a first secure network and at least one or mor e second 
nod e s node in a second secure network, said first and second networks being separated by 
a relatively insecure network, wherein communications from said first node to the at least 
one or more of said second nodes node via said relatively insecure network are encrypted, 
the network arrangement comprising at least one or more n etwork elements element 
operable to store security information and triggerable to distribute said security 
information in a secure manner from said first node to at least one or more t arget node s 
node in said second secure network. 

43. (Currently Amended) A network arrangement according to claim 42, which 
wherein said network arrangement is operable to distribute s_ajd security information 
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including at least one of encryption algorithms; decryption algorithms; security keys; and 
electronic cash bit strings. 



44. (Currently Amended) A network arrangement according to claim 42 or 13 , 
wherein the at least one or mor e network e l e m e nts element compris e comprises switch 
means provided with control means, and storage means for storing said 
encryption/decryption information. 

45. (Currently Amended) A network arrangement according to claim 42, wherein 
said switch means is operable to selectively distribute said security information in 
response to a predetermined type of communication. 

46. (Original) A network arrangement according to claim 45, wherein said 
predetermined type of communication is identified by means of originating subscriber 
characteristics, destination subscriber characteristics, payload characteristics or network 
service characteristics. 

47. (Currently Amended) A network arrangement according to claim 42, 43-er 
44rwherein said distribution is triggered according to a predetermined schedule. 



48. (Currently Amended) A network arrangement according to any of claims \2 
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te-4? claim 42. comprising a service management access point. 



49. (Currently Amended) A network arrangement according to any of claims 12 
te-4S claim 42 . wherein the security information is distributed to a node within at least 
one or more of the first secure network and second secure network, rather than the a 
destination end terminal for the communication in question. 

50. (Currently Amended) A network arrangement according to any of claims 12 
te-49 claim 42 . wherein the security information is distributed to the an end terminal for 
the communication in question. 

51. (Currently Amended) A network arrangement according to any of claims 12 
te-SO claim 42. wherein the at least one or more network e l e ments element distributes 
sajd security information from a location substantially within the first secure network. 

52. (Currently Amended) A network arrangement according to any of claims 12 
te-54 claim 42, wherein the at least one or more network e l e ments element distributes the 
security information from a location substantially within at least one of the first or second 
networks. 

53. (Currently Amended) A network arrangement according to claim 52, wherein 
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said security information is transferred to the at least one or more network e l e m e ntG 
element located in the second secure network by means of a secure communication route 
operated by trusted network operators. 

54. (Currently Amended) A network arrangement according to claim 53, wherein 
said security information is transferred to the at least one or more network elements 
element located in the second secure network by means of a secure communication route 
over a the relatively insecure intermediate network. 

55. (Currently Amended) A network arrangement for the distribution of security 
information between a first node and at least one or more second nod e s node , including at 
least one or more network el e ments element operable to store security information and 
triggerable to distribute the security information from said first node to the at least one of 
more of said second nodes node . 

56. (Currently Amended) A network arrangement for the distribution of security 
information between a node in a first secure network and at least one or mor e nodes node 
in a second secure network, said first and second networks being separated by a relatively 
insecure intermediate network, including: 

in at least one of said first and second secure networks , at least one or more 
network e l e ments element operable to store security information and triggerable to 
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distribute said security information to at least one or more target nod e s node in said 
second secure network; and 

an encryption engine for encrypting a communication before it traverses said 
relatively insecure intermediate network. 



57. (Canceled) 

58. (Canceled) 

59. (Currently Amended) A method according to claim 16 or 17 , provid e d 
wherein sa id providing comprises providing said access point to a subscriber in a visited 
network by virtue of a roaming agreement between the an operator of the visited network 
and fee an operator of the subscriber's home network. 
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